Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
File: Cani7ovOptW5GcSjPSbZu_mCqEM.mft (raw, json)
Hash identifier: cq07W9zC+gX0I6NBZuqGnOKLwN17Mybeee8DaYvN5u8=
Subject key identifier: CA:86:05:5B:3A:E7:F8:09:FC:17:87:A8:25:85:C5:F6:68:CF:77:0C
Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Certificate serial: 019D98188C461CCAAF65C639D2364EDADAFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
Manifest number: 0D3F
Signing time: Thu 16 Apr 2026 21:00:38 +0000
Manifest this update: Thu 16 Apr 2026 21:00:38 +0000
Manifest next update: Fri 17 Apr 2026 21:00:38 +0000
Files and hashes: 1: Cani7ovOptW5GcSjPSbZu_mCqEM.crl (hash: 0QGW0faMO/NxXlcqsSp6281zIL+kcfQs92WUnrBx1ZY=)
2: ToM6N48G8WGMzFpuQ0Gt_pOWEHc.roa (hash: f5NlaoVCrJ+ZbPHrxjLY8hxzqQ0aKUh9p8kFFA8E7Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:8c:46:1c:ca:af:65:c6:39:d2:36:4e:da:da:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Validity
Not Before: Apr 16 21:00:38 2026 GMT
Not After : Apr 17 21:00:38 2026 GMT
Subject: CN=ca86055b3ae7f809fc1787a82585c5f668cf770c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:17:c6:56:90:20:11:78:ae:83:74:6e:48:aa:
96:4c:8a:1f:8d:cb:61:e8:e1:c6:22:67:9b:d1:5a:
99:26:ce:18:4f:85:1d:09:a7:9d:fc:55:18:13:25:
52:7e:a2:c9:4b:27:c5:e9:12:c8:9d:cc:0d:f0:9a:
d6:48:79:0d:68:1b:2d:ad:84:03:09:83:34:7d:52:
73:6f:aa:5e:bd:66:4d:c6:79:37:b3:58:b8:43:5f:
42:15:70:fb:76:fb:84:25:6c:aa:df:80:b0:f5:9a:
a3:3f:a5:7f:21:45:1d:d6:e9:41:a9:d6:9a:22:61:
84:f4:54:ae:a7:38:d4:f7:9e:f9:78:9c:ff:57:11:
17:07:36:47:bf:cb:17:e7:d0:98:c4:6c:ca:95:55:
ba:77:4c:51:6b:d9:19:06:3a:99:87:b3:27:bc:81:
10:9e:7d:30:a6:43:1d:97:05:7e:b8:98:df:00:81:
79:06:2c:0d:00:a8:06:5f:4c:af:1c:db:ae:a1:bd:
a0:bf:78:43:b4:5a:12:85:2a:d1:47:98:fd:de:a2:
2c:02:60:38:9b:ff:51:67:ae:d6:a5:44:fb:de:a8:
cb:f3:ff:dc:fb:f0:92:27:b6:8a:04:f1:58:e0:eb:
81:77:d5:3d:c8:7c:7d:bb:24:f8:30:e2:d3:61:9c:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:86:05:5B:3A:E7:F8:09:FC:17:87:A8:25:85:C5:F6:68:CF:77:0C
X509v3 Authority Key Identifier:
keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ee:69:71:00:89:59:ba:8e:a7:9e:07:45:9c:8f:17:14:57:
f5:3c:e6:43:d5:2f:a5:a4:3f:6b:9e:5c:ed:c6:59:c4:8b:b1:
2e:2d:65:0e:e0:5c:58:79:f8:74:fc:fc:6a:6d:38:b0:ad:21:
e3:9d:26:65:66:dc:50:73:55:e0:ac:79:2e:68:c7:8c:fa:c4:
2d:aa:48:35:e8:ad:29:37:8f:bf:5c:e6:f3:29:32:e4:51:e8:
bc:2f:ae:f8:e4:ae:46:c3:46:c1:45:06:2b:58:e2:a6:9e:32:
da:0b:5e:72:b0:f7:6b:83:ec:20:3b:ea:7b:dd:70:ba:1c:dd:
97:48:67:5e:d4:5e:3f:7f:16:2d:f9:b1:ef:e9:d7:6c:31:dc:
da:e2:a8:22:3d:09:e7:d0:37:a5:ca:0a:d9:e1:d6:cd:12:d5:
03:4d:45:5b:ff:7e:a8:b5:2d:97:e2:fa:84:a3:f5:a0:dd:e3:
1a:fd:67:e7:00:d5:d5:c3:e1:10:12:1f:55:b2:67:55:4b:39:
3e:99:bd:5c:83:d4:83:ae:5f:65:bb:40:55:73:3f:43:6f:45:
60:8d:8d:be:e5:73:8a:ca:5a:30:43:b4:4d:1b:36:62:4f:4d:
2f:06:61:4f:ea:29:78:29:94:84:b8:d7:9d:70:1f:77:4d:f7:
49:4e:a2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:41 2026 by rpki-client